appsec-bot-challenge-exclude-feeds WAF Configuration by crowdsecurity | CrowdSec Hub

appsec-bot-challenge-exclude-feeds

WAF configuration

By: crowdsecurity
Version: 0.4

Install with a top-level collection

3 collections include it

sudo cscli collections install crowdsecurity/appsec-bot-challenge

Installs 2 parsers and 2 scenarios, via WAF - Bot Challenge Path Exclusions.

View WAF - Bot Challenge →

Installation

sudo cscli appsec-configs install crowdsecurity/appsec-bot-challenge-exclude-feeds

Then reload CrowdSec: sudo systemctl reload crowdsec

Configuration

appsec-configs/crowdsecurity/appsec-bot-challenge-exclude-feeds.yaml· 10 linesGitHub

1name: crowdsecurity/appsec-bot-challenge-exclude-feeds
2# Let syndication feed endpoints fly through without a challenge.
3# Do not edit this file to add your own exclusions, create a custom config.
4inband:
5  pre_eval:
6    - filter: >-
7        req.URL.Path in ['/feed', '/rss', '/atom.xml', '/feed.xml', '/rss.xml', '/index.xml', '/feed.atom'] ||
8        req.URL.Path startsWith '/feed/' || req.URL.Path startsWith '/rss/'
9      apply:
10        - ExemptFromChallenge("feeds")

Installed on

Know where it runs

Sign in to see the Security Engines that run this waf configuration, the version they run and whether it was modified locally.